$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa File: 29b74943-e07a-3714-bec6-83f8e6cffff8.roa (raw, json) Hash identifier: BmReIzRvNVBPXJuQwJbXpJrdYdx9nJahCNRGil9NzG0= Subject key identifier: 32:74:4E:F6:6F:B2:50:5E:C8:16:BC:3E:8F:98:2E:C3:AF:39:64:95 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F43285848EC96905689187CB5073EC980 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 3807 IP address blocks: 207.196.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:90:56:89:18:7c:b5:07:3e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=b56ac1ae-d7b9-4b1a-8ef4-587e97c16523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:21:61:a0:58:e6:1a:18:57:9c:8b:1a:9f: e1:21:10:e8:5a:60:3c:d3:22:ad:f5:9b:0d:f0:96: 7e:09:ac:23:ab:65:94:15:a7:34:fc:ce:23:74:ca: 5e:a8:fd:44:98:d2:e6:6f:ae:6a:a9:f4:47:4a:40: c0:a2:f3:e7:a4:9b:e0:ca:61:8f:ef:68:ce:34:82: 64:7a:82:af:87:7d:65:22:0e:ec:6d:62:38:78:f5: c7:2c:5e:02:eb:42:54:09:4f:4e:d3:48:bb:a6:cb: 07:28:7a:88:49:d0:f4:b6:0d:97:f7:a2:8e:b9:9d: 08:7d:26:dd:25:15:cf:41:b6:ba:ca:bd:a0:2b:4a: bd:b2:98:15:36:c4:21:12:86:94:81:74:28:66:e4: 59:5a:c6:86:be:7d:f9:9b:51:99:26:61:8f:86:e1: 86:d7:b5:3f:e4:b0:9d:9d:07:d0:43:01:d4:c9:36: f1:8c:8d:54:37:b8:3b:fa:8b:84:b3:15:c4:0a:cd: d1:71:c7:04:b7:57:87:b6:cf:45:fc:ee:36:9e:99: 23:96:cf:97:7c:32:ff:c0:f1:af:d3:75:87:97:6e: 5c:03:fc:0d:a0:70:2f:49:77:52:40:c0:f3:72:03: fe:6d:7a:c6:d4:62:ec:30:00:f1:f0:c6:b4:09:dc: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:74:4E:F6:6F:B2:50:5E:C8:16:BC:3E:8F:98:2E:C3:AF:39:64:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/29b74943-e07a-3714-bec6-83f8e6cffff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:32:32:70:5c:19:50:44:7d:05:a8:1c:00:58:f0:ec:14:b7: 45:85:ee:69:61:96:b4:76:1b:45:42:77:66:ef:8c:0a:0e:b4: 38:33:c2:e3:eb:1a:6e:9e:50:7d:46:8a:bb:f5:6c:bb:cb:6c: 28:41:b6:42:10:3d:7a:cc:36:7b:3e:b8:51:d7:4f:17:48:37: 2d:80:cd:0f:b4:58:65:dd:d7:e7:1d:98:0d:b1:39:1a:7d:8e: 65:e7:13:e0:5d:f0:15:79:b9:b0:0a:b3:96:09:cc:2b:df:68: ce:68:80:f3:19:11:6e:c0:af:43:92:fe:e6:e2:d2:d7:94:a3: 37:33:9b:51:58:30:64:a6:27:a7:c3:ce:3e:57:fc:b3:7c:50: c2:70:f1:18:23:8a:80:20:4f:aa:72:27:6d:3a:a5:b6:8b:3a: d4:66:c5:00:1d:71:2a:73:c5:df:50:9a:57:6c:6c:3c:17:79: 10:d4:2e:de:22:5e:17:22:ad:d0:85:ad:64:4e:a7:66:ae:0e: 8f:04:cf:7a:ce:ec:5c:55:46:a9:f6:b9:59:f8:f4:53:f7:52: 39:c9:37:d2:08:07:60:ed:e0:0b:1a:5b:11:de:b3:55:23:bf: b8:ea:a9:f5:51:08:ec:27:68:f2:22:67:48:ac:22:cc:4f:79: ac:45:b7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpBWiRh8tQc+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YjU2YWMxYWUtZDdiOS00YjFhLThlZjQtNTg3ZTk3YzE2NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRIhYaBY5hoYV5yLGp/hIRDoWmA80yKt9ZsN 8JZ+Cawjq2WUFac0/M4jdMpeqP1EmNLmb65qqfRHSkDAovPnpJvgymGP72jONIJk eoKvh31lIg7sbWI4ePXHLF4C60JUCU9O00i7pssHKHqISdD0tg2X96KOuZ0IfSbd JRXPQba6yr2gK0q9spgVNsQhEoaUgXQoZuRZWsaGvn35m1GZJmGPhuGG17U/5LCd nQfQQwHUyTbxjI1UN7g7+ouEsxXECs3RcccEt1eHts9F/O42npkjls+XfDL/wPGv 03WHl25cA/wNoHAvSXdSQMDzcgP+bXrG1GLsMADx8Ma0CdxhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ0TvZvslBeyBa8Po+YLsOvOWSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMjliNzQ5NDMtZTA3YS0z NzE0LWJlYzYtODNmOGU2Y2ZmZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8TMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsyMnBcGVBEfQWoHABY8OwUt0WF7mlhlrR2G0VCd2bvjAoOtDgzwuPr Gm6eUH1Girv1bLvLbChBtkIQPXrMNns+uFHXTxdINy2AzQ+0WGXd1+cdmA2xORp9 jmXnE+Bd8BV5ubAKs5YJzCvfaM5ogPMZEW7Ar0OS/ubi0teUozczm1FYMGSmJ6fD zj5X/LN8UMJw8RgjioAgT6pyJ206pbaLOtRmxQAdcSpzxd9QmldsbDwXeRDULt4i XhcirdCFrWROp2auDo8Ez3rO7FxVRqn2uVn49FP3UjnJN9IIB2Dt4AsaWxHes1Uj v7jqqfVRCOwnaPIiZ0isIsxPeaxFt3Y= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:00 2025 by rpki-client